Privacy Policy

Last updated: July 17, 2026

Operator: Guy Levi, an individual (sole proprietor) based in the State of Florida, United States. Privacy contact: noumenon.aii@gmail.com.

What we collect

Tiniary collects account identifiers, baby profile details you enter (name, birth date, and premature-week adjustment), activity responses, notes, subscription status, and product analytics. The app keeps a working copy of baby and memory data on your device. When you are signed in and online, eligible records are sent to Supabase; a record is not available on another device until cloud synchronization succeeds. Tiniary does not collect photos, voice recordings, or any biometric data. Legal bases include contract performance, consent where required, legitimate interests in security and improvement, and legal obligations.

Who processes your data

Named processors: Supabase for authentication and database hosting, RevenueCat for subscription entitlement management, Apple App Store and Google Play for payments, PostHog for analytics, and Expo/EAS for app build and notification infrastructure. These processors act only on Tiniary's behalf to run the service. Tiniary does not sell your or your child's data, does not share it for advertising, does not use it for targeted or behavioral advertising, and does not provide it to other businesses for their own marketing or purposes. Payment card data is handled by app-store processors and is not stored by Tiniary.

Your rights and retention

You may request access, deletion, export, correction, restriction, or opt-out where applicable under GDPR and CCPA. Use Delete account in the app or follow the web account-deletion instructions. Requests submitted by email are completed within 30 days after account ownership is verified. Account data is deleted or anonymized unless limited records must be retained for security, fraud prevention, legal compliance, or processor backup schedules. Data may be processed internationally with contractual safeguards. Tiniary is not directed to children as account holders.

Children's privacy

Adults create and control Tiniary accounts and confirm at sign-up that they are the child's parent or legal guardian. Baby names, birth dates, premature-week adjustments, activity responses, and notes are entered by the adult account holder and are used to provide age-adjusted activity selection, timelines, and recaps. Tiniary does not collect photos, voice recordings, or biometric data, and performs no facial or voice recognition. We do not knowingly allow children to create accounts.

Security

Security measures include Supabase row-level security, authenticated access controls, bounded notes, and processor-hosted payment flows. Cookies or mobile identifiers may be used for authentication, analytics, subscriptions, and notification delivery. You can contact noumenon.aii@gmail.com to exercise privacy rights.